mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

feat: support all valid jsonpatches in validation webhook (#9476)

Browse source 
Signed-off-by: Lukas Wöhrl <lukas.woehrl@plentymarkets.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Lukas Wöhrl 2024-01-22 15:49:08 +01:00 • committed by GitHub
parent 2f4b823030
commit 349e363a41
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
pkg/validation/policy/validate.go
View file

@ -89,10 +89,12 @@ func validateJSONPatch(patch string, ruleIdx int) error {
}
for _, operation := range decodedPatch {
op := operation.Kind()
if op != "add" && op != "remove" && op != "replace" {
requiresValue := op != "remove" && op != "move" && op != "copy"
validOperation := op == "add" || op == "remove" || op == "replace" || op == "move" || op == "copy" || op == "test"
if !validOperation {
return fmt.Errorf("unexpected kind: spec.rules[%d]: %s", ruleIdx, op)
}
if op != "remove" {
if requiresValue {
if _, err := operation.ValueInterface(); err != nil {
return fmt.Errorf("invalid value: spec.rules[%d]: %s", ruleIdx, err)
}